What's collected

When you submit the enquiry form at /contact, the following is stored:

• Name and email address (required)
• The service you selected and your message (required)
• Company, existing project URL, stack, budget band, and desired deadline, if you choose to provide them (optional)
• Submission metadata used only for spam prevention: timestamp and a per-submission idempotency key

We do not ask for passwords, API keys, file uploads, or access to private repositories. Please don't include them in the message field either.

Why it's collected

Solely to evaluate your enquiry and reply to you about a potential engagement. It is not used for advertising, profiling, or sold or shared with third parties for marketing.

No non-essential tracking

This site does not use analytics cookies, advertising trackers, or third-party embeds on any page, including this form.

Where it's stored

Enquiries are stored in a PostgreSQL database operated for FormaHarbor. There is no public API to read or browse submitted enquiries; access is limited to an authenticated, owner-run export process.

Launch blocker — owner input needed: name the actual hosting provider and region for the production database once one is chosen.

Processors

When you submit the form, a notification containing what you submitted — including your message — is sent to the owner's inbox by email. Notifications are best-effort; a failed or unconfigured notification never affects whether your enquiry was saved.

Retention & deletion

To request deletion or a copy of what was submitted, email [email protected] with the email address you submitted the form with.

Launch blocker — owner input needed: confirm the real contact address (the current one is a placeholder) and how long enquiries are retained after an engagement concludes or a lead goes cold.